Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
pymchelper is a toolkit for aiding users of the particle transport codes, such as FLUKA and SHIELD-HIT12A.
Particle transport codes produce binary files (especially when running on dedicated computing clusters).
It provides a command line program convertmc
which can convert these binary files to graphs:
convertmc image --many "*.bdo"
This converter is capable of converting binary output to many other formats, like CSV, XLS or HDF.
Another feature of the toolkit is a command line utility runmc
which speeds up particle transport simulation by splitting the calculation on multiple processes and merging the results
runmc --jobs 16 --out-type txt directory_with_input_files
Toolkit can also serve as a library in Python language, which can be used by programmers and data scientists to read data from binary files into convenient Python objects. This allows further data processing using other Python tools and libraries.
pymchelper works under Linux, Windows and Mac OSX operating systems.
To install pymchelper as a python package, type:
pip install pymchelper[full]
On Linux systems from Debian family pymchelper can be installed using apt
package manager with couple of commands::
wget --quiet --output-document - https://datamedsci.github.io/deb_package_repository/public.gpg | sudo apt-key add -
sudo wget --quiet --output-document /etc/apt/sources.list.d/datamedsci.list https://datamedsci.github.io/deb_package_repository/datamedsci.list
sudo apt update
sudo apt install pymchelper
Full pymchelper documentation can be found here: https://datamedsci.github.io/pymchelper/index.html
See Getting Started for installation and basic information, and the User's Guide for an overview of how to use the project.
FAQs
Python toolkit for SHIELD-HIT12A and FLUKA
We found that pymchelper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.